App in a Box - Scaler

Scripts

The install script uses the gcloud and gsutil CLI tools to take an empty project and install the application in it. The output should be a working application and a url to the Cloud Run service for the front end.

• Enable Services

  Google Cloud Services are disabled in a project by default. In order to use any of the solutions here we have to activate the following:

  • Cloud Build - creates container images and deploys to Cloud Run
  • Cloud Storage - hosting the static files
  • Cloud Functions - event responding Functions as a Service platform
  • Cloud Run - the serverless tool which will host the container and provide a URLS from which to access the application.
  • Artifiact Registry - stores the Docker images for use with Cloud Build.

  gcloud services enable cloudbuild.googleapis.com 
  gcloud services enable storage.googleapis.com 
  gcloud services enable cloudfunctions.googleapis.com 
  gcloud services enable run.googleapis.com 
  gcloud services enable artifactregistry.googleapis.com 
  

• Create the Storage bucket

  Creates the repository for the uploaded files and the thumbnails

  gsutil mb gs://$BUCKET
  

• Set Permissions

  Sets IAM Roles and Permissions that will allow Cloud Build to deploy all of the services.

  • Enable Cloud Build Service Account to deploy to Cloud Run
  • Enable Cloud Build Service Account to perform Service Account activities
  • Enable Cloud Build Service Account to publish to Cloud Run
  • Enable Cloud Build Service Account to store containers in Artifact Registry

  gcloud projects add-iam-policy-binding $PROJECT \
  --member serviceAccount:$SABUILD \
  --role roles/run.developer --no-user-output-enabled
  gcloud projects add-iam-policy-binding $PROJECT \
  --member serviceAccount:$SABUILD \
  --role roles/iam.serviceAccountUser --no-user-output-enabled
  gcloud projects add-iam-policy-binding $PROJECT \
  --member=serviceAccount:$SABUILD \
  --role=roles/run.admin --no-user-output-enabled
  gcloud projects add-iam-policy-binding $PROJECT \
  --member=serviceAccount:$SABUILD \
  --role=roles/artifactregistry.admin --no-user-output-enabled    
  

• Creating Artifact Registry repoistory for containers

  Artifact registry needs a repo to store things.

  gcloud artifacts repositories create scaler-app --location=$REGION \
                              --repository-format=docker  
  

• Creating Artifact Registry repoistory for containers

  Artifact registry needs a repo to store things.

  gcloud artifacts repositories create scaler-app --location=$REGION \
                              --repository-format=docker  
  

• Deploy to Cloud Run

  Uses Cloud Build to deploy to Cloud Run

  gcloud builds submit --substitutions=_REGION=$REGION .
  

./cloudbuild.yaml

• Deploy Function code to Cloud Functions

  Push directly to functions and activate.

   - name: "gcr.io/google.com/cloudsdktool/cloud-sdk"
      id: functiondeploy
      entrypoint: gcloud
      args:
          [
          "functions",
          "deploy",
          "scaler",
          "--runtime",
          "go116",
          "--trigger-resource",
          "$_BUCKET",
          "--trigger-event",
          "google.storage.object.finalize",
          "--entry-point",
          "OnFileUpload",
          "--source",
          "code/function",
          ]
  

• Build API Container

  We need to make a Docker image for the user facing app.

   - name: "gcr.io/cloud-builders/docker"
      id: apibuild
      waitFor: ["-"]
      args:
          [
          "build",
          "-t",
          "$_REGION-docker.pkg.dev/$PROJECT_ID/scaler-app/prod",
          ".",
          ]
      dir: "code/app"
  

• Push API Container to Artifact Registry

  Pushing the container to Artifcat Registry makes it possible for Cloud Run to get the image and serve it.

    - name: "gcr.io/cloud-builders/docker"
      id: apipush
      waitFor: ["apibuild"]
      args: ["push", "$_REGION-docker.pkg.dev/$PROJECT_ID/scaler-app/prod"]
  

• Deploy API Container to Cloud Run

  Pushing the container to Artifact Registry makes it possible for Cloud Run to get the image and serve it.

   - name: "gcr.io/google.com/cloudsdktool/cloud-sdk"
      id: apideploy
      waitFor: ["apipush"]
      entrypoint: gcloud
      args:
          [
          "run",
          "deploy",
          "scaler-app",
          "--image",
          "$_REGION-docker.pkg.dev/$PROJECT_ID/scaler-app/prod",
          "--region",
          "$_REGION",
          "--allow-unauthenticated",
          "--set-env-vars",
          "BUCKET=$_BUCKET",
          "--port",
          "80",
          ]
  

• Substitutions

  Create a variable with a default so that these values can be changed a deploy time.

     substitutions:
        _REGION: us-central1